//0x1220 bytes (sizeof)
struct _ETW_SILODRIVERSTATE
{
struct _EJOB* Silo; //0x0
struct _ESERVERSILO_GLOBALS* SiloGlobals; //0x8
ULONG MaxLoggers; //0x10
struct _ETW_GUID_ENTRY EtwpSecurityProviderGuidEntry; //0x18
struct _EX_RUNDOWN_REF_CACHE_AWARE** EtwpLoggerRundown; //0x1c0
struct _WMI_LOGGER_CONTEXT** EtwpLoggerContext; //0x1c8
struct _ETW_HASH_BUCKET EtwpGuidHashTable[64]; //0x1d0
USHORT EtwpSecurityLoggers[8]; //0xfd0
UCHAR EtwpSecurityProviderEnableMask; //0xfe0
LONG EtwpShutdownInProgress; //0xfe4
ULONG EtwpSecurityProviderPID; //0xfe8
struct _ETW_PRIV_HANDLE_DEMUX_TABLE PrivHandleDemuxTable; //0xff0
struct _ETW_COUNTERS EtwpCounters; //0x1010
union _LARGE_INTEGER LogfileBytesWritten; //0x1020
struct _ETW_SILO_TRACING_BLOCK* ProcessorBlocks; //0x1028
struct _EX_WNF_SUBSCRIPTION* ContainerRestoreWnfSubscription; //0x1030
struct _GUID PartitionId; //0x1038
struct _GUID ParentId; //0x1048
union _LARGE_INTEGER QpcOffsetFromRoot; //0x1058
CHAR* PartitionName; //0x1060
USHORT PartitionNameSize; //0x1068
USHORT UnusedPadding; //0x106a
ULONG PartitionType; //0x106c
struct _ETW_SYSTEM_LOGGER_SETTINGS SystemLoggerSettings; //0x1070
struct _KMUTANT EtwpStartTraceMutex; //0x11e8
};